Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Mar 24, 2026
Malicious code in stats-helpers (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in open-vp-cal (PyPI)
1 compromised version
- Mar 24, 2026
Two litellm versions published containing credential harvesting malware
2 compromised versions
- Mar 24, 2026
Malicious code in rocketpill (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in flycalc (PyPI)
2 compromised versions
- Mar 24, 2026
Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)
14 compromised versions
- Mar 24, 2026
Malicious code in litellm (PyPI)
2 compromised versions
- Mar 24, 2026
Malicious code in mgrcfg (PyPI)
3 compromised versions
- Mar 23, 2026
Malicious code in rowrapee (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in roboat (PyPI)
5 compromised versions
- Mar 23, 2026
Malicious code in logutilkit (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in apachelicense (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in hash-utils-py (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in apply-hive-table (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in pyregions-snowflake (PyPI)
9 compromised versions
- Mar 23, 2026
Malicious code in dmclc (PyPI)
9 compromised versions
- Mar 23, 2026
Malicious code in modelconftranslator (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in financial-crimes-general-utils (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in license-utils-kit (PyPI)
9 compromised versions
- Mar 23, 2026
Malicious code in anduril-sdk (PyPI)
2 compromised versions
- Mar 22, 2026
Malicious code in pipinpeace-bind (PyPI)
1 compromised version
- Mar 22, 2026
Malicious code in pipinpeace-reverse (PyPI)
1 compromised version
- Mar 22, 2026
Malicious code in pipinpeace-env (PyPI)
1 compromised version
- Mar 21, 2026
Malicious code in aiolrucache (PyPI)
4 compromised versions
- Mar 21, 2026
Malicious code in thisismytest (PyPI)
5 compromised versions
- Mar 21, 2026
Malicious code in qyrm-pipinject4 (PyPI)
1 compromised version
- Mar 21, 2026
Malicious code in nump (PyPI)
4 compromised versions
- Mar 20, 2026
Malicious code in mangrove-sdk (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in efghr-honeybee-sdk (PyPI)
2 compromised versions
- Mar 20, 2026
Malicious code in flyio-token-client-efgh (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in tui-ascii-art (PyPI)
2 compromised versions
- Mar 20, 2026
Malicious code in indpack (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in reqpack (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in gcpipwrap (PyPI)
7 compromised versions
- Mar 20, 2026
Malicious code in nspack (PyPI)
8 compromised versions
- Mar 20, 2026
Malicious code in cfgmgr-sync (PyPI)
10 compromised versions
- Mar 20, 2026
Malicious code in cfgmgr-syn (PyPI)
2 compromised versions
- Mar 20, 2026
Malicious code in init2winit (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in airio (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in nsscache (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in spatialmedia (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in pubsub2inbox (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in perfkitbenchmarker (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in composer-dev (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in dataflux-pytorch (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in mcp-transport-proto (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in cloud-datasets (PyPI)
1 compromised version
- Mar 20, 2026
Malicious code in azure-eventhub-checkpointstoretable (PyPI)
1 compromised version
- Mar 19, 2026
Malicious code in libavcodec-extra (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in ropie (PyPI)
1 compromised version
Page 18 of 233